CVE-2026-107092

Impact

NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• http://nexopos.com
• https://github.com/raivenLockdown/CVE-2026-107092